How do I block ShareFile's download, sharing, and upload services?

Article #:

Product

Castle

KB-71

Guardian

All

Summary

This article explains how to setup ShareFile categories to restrict what the user is allowed to do — namely downloading, uploading and opening shared documents.

Note: Implementing this solution will only work on the web client, it will not work with ShareFile applications.

Solution

The following will outline the procedure of how to set up custom categories to block uploading, downloading, or accessing shared files in ShareFile.

  1. Create a new custom category in Guardian > Policy objects > Categories, named for the service you are blocking, for example, ShareFile Uploads.
  2. Add the following to block the service:
To block downloads add the following to Domain/URL filtering:

sharefile.com/download.ashx

To block shared documents add the following to URL patterns:

(sharefile\.com\/d-.*)

To block uploads add the following to URL patterns:

(sharefile\.com\/upload.*?\.)(?:aspx)

Tip: If required, you can add all three URLs above to a single custom category to block all ShareFile services

  1. Add the newly created custom category to the Decrypt and inspect policy in Guardian > HTTPS inspection > Manage policies.
    1. If one does not exist, create a new HTTPS inspection policy with the ShareFile custom category selected as the What, and Decrypt and inspect as the Action.
  2. Create a new web filter policy (Guardian > Web filter > Policy wizard) with the following attributes:
Who — Everyone*
What — Choose the custom category created in step 1
Where — Everywhere*
When — Always*
Action — Block
Make Sure Enable Policy is selected

*You should change these based on your organizational needs.

Attribution:

Last updated:

Author:

Contributions by:

31 January 2017

Patrick Gleeson

SN

 

Copyright © 2000-2016 Smoothwall All rights reserved.